man/systemd.netdev.xml

   1 <?xml version='1.0'?> <!--*-nxml-*-->
   2 <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
   3   "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
   4
   5 <!--
   6   This file is part of systemd.
   7
   8   Copyright 2013 Tom Gundersen
   9
  10   systemd is free software; you can redistribute it and/or modify it
  11   under the terms of the GNU Lesser General Public License as published by
  12   the Free Software Foundation; either version 2.1 of the License, or
  13   (at your option) any later version.
  14
  15   systemd is distributed in the hope that it will be useful, but
  16   WITHOUT ANY WARRANTY; without even the implied warranty of
  17   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  18   Lesser General Public License for more details.
  19
  20   You should have received a copy of the GNU Lesser General Public License
  21   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  22 -->
  23
  24 <refentry id="systemd.netdev" conditional='ENABLE_NETWORKD'>
  25
  26   <refentryinfo>
  27     <title>systemd.network</title>
  28     <productname>systemd</productname>
  29
  30     <authorgroup>
  31       <author>
  32         <contrib>Developer</contrib>
  33         <firstname>Tom</firstname>
  34         <surname>Gundersen</surname>
  35         <email>teg@jklm.no</email>
  36       </author>
  37     </authorgroup>
  38   </refentryinfo>
  39
  40   <refmeta>
  41     <refentrytitle>systemd.netdev</refentrytitle>
  42     <manvolnum>5</manvolnum>
  43   </refmeta>
  44
  45   <refnamediv>
  46     <refname>systemd.netdev</refname>
  47     <refpurpose>Virtual Network Device configuration</refpurpose>
  48   </refnamediv>
  49
  50   <refsynopsisdiv>
  51     <para><filename><replaceable>netdev</replaceable>.netdev</filename></para>
  52   </refsynopsisdiv>
  53
  54   <refsect1>
  55     <title>Description</title>
  56
  57     <para>Network setup is performed by
  58     <citerefentry><refentrytitle>systemd-networkd</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
  59     </para>
  60
  61     <para>The main Virtual Network Device file must have the extension <filename>.netdev</filename>;
  62     other extensions are ignored. Virtual network devices are created as soon as networkd is
  63     started. If a netdev with the specified name already exists, networkd will use that as-is rather
  64     than create its own. Note that the settings of the pre-existing netdev will not be changed by
  65     networkd.</para>
  66
  67     <para>The <filename>.netdev</filename> files are read from the files located in the system
  68     network directory <filename>/usr/lib/systemd/network</filename>, the volatile runtime network
  69     directory <filename>/run/systemd/network</filename> and the local administration network
  70     directory <filename>/etc/systemd/network</filename>. All configuration files are collectively
  71     sorted and processed in lexical order, regardless of the directories in which they live.
  72     However, files with identical filenames replace each other. Files in <filename>/etc</filename>
  73     have the highest priority, files in <filename>/run</filename> take precedence over files with
  74     the same name in <filename>/usr/lib</filename>. This can be used to override a system-supplied
  75     configuration file with a local file if needed. As a special case, an empty file (file size 0)
  76     or symlink with the same name pointing to <filename>/dev/null</filename> disables the
  77     configuration file entirely (it is "masked").</para>
  78
  79     <para>Along with the netdev file <filename>foo.netdev</filename>, a "drop-in" directory
  80     <filename>foo.netdev.d/</filename> may exist. All files with the suffix <literal>.conf</literal>
  81     from this directory will be parsed after the file itself is parsed. This is useful to alter or
  82     add configuration settings, without having to modify the main configuration file. Each drop-in
  83     file must have appropriate section headers.</para>
  84
  85     <para>In addition to <filename>/etc/systemd/network</filename>, drop-in <literal>.d</literal>
  86     directories can be placed in <filename>/usr/lib/systemd/network</filename> or
  87     <filename>/run/systemd/network</filename> directories. Drop-in files in
  88     <filename>/etc</filename> take precedence over those in <filename>/run</filename> which in turn
  89     take precedence over those in <filename>/usr/lib</filename>. Drop-in files under any of these
  90     directories take precedence over the main netdev file wherever located. (Of course, since
  91     <filename>/run</filename> is temporary and <filename>/usr/lib</filename> is for vendors, it is
  92     unlikely drop-ins should be used in either of those places.)</para>
  93   </refsect1>
  94
  95   <refsect1>
  96     <title>Supported netdev kinds</title>
  97
  98     <para>The following kinds of virtual network devices may be
  99     configured in <filename>.netdev</filename> files:</para>
 100
 101     <table>
 102       <title>Supported kinds of virtual network devices</title>
 103
 104       <tgroup cols='2'>
 105         <colspec colname='kind' />
 106         <colspec colname='explanation' />
 107         <thead><row>
 108           <entry>Kind</entry>
 109           <entry>Description</entry>
 110         </row></thead>
 111         <tbody>
 112           <row><entry><varname>bond</varname></entry>
 113           <entry>A bond device is an aggregation of all its slave devices. See <ulink url="https://www.kernel.org/doc/Documentation/networking/bonding.txt">Linux Ethernet Bonding Driver HOWTO</ulink> for details.Local configuration</entry></row>
 114
 115           <row><entry><varname>bridge</varname></entry>
 116           <entry>A bridge device is a software switch, and each of its slave devices and the bridge itself are ports of the switch.</entry></row>
 117
 118           <row><entry><varname>dummy</varname></entry>
 119           <entry>A dummy device drops all packets sent to it.</entry></row>
 120
 121           <row><entry><varname>gre</varname></entry>
 122           <entry>A Level 3 GRE tunnel over IPv4. See <ulink url="https://tools.ietf.org/html/rfc2784">RFC 2784</ulink> for details.</entry></row>
 123
 124           <row><entry><varname>gretap</varname></entry>
 125           <entry>A Level 2 GRE tunnel over IPv4.</entry></row>
 126
 127           <row><entry><varname>ip6gre</varname></entry>
 128           <entry>A Level 3 GRE tunnel over IPv6.</entry></row>
 129
 130           <row><entry><varname>ip6tnl</varname></entry>
 131           <entry>An IPv4 or IPv6 tunnel over IPv6</entry></row>
 132
 133           <row><entry><varname>ip6gretap</varname></entry>
 134           <entry>A Level 2 GRE tunnel over IPv6.</entry></row>
 135
 136           <row><entry><varname>ipip</varname></entry>
 137           <entry>An IPv4 over IPv4 tunnel.</entry></row>
 138
 139           <row><entry><varname>ipvlan</varname></entry>
 140           <entry>An ipvlan device is a stacked device which receives packets from its underlying device based on IP address filtering.</entry></row>
 141
 142           <row><entry><varname>macvlan</varname></entry>
 143           <entry>A macvlan device is a stacked device which receives packets from its underlying device based on MAC address filtering.</entry></row>
 144
 145           <row><entry><varname>macvtap</varname></entry>
 146           <entry>A macvtap device is a stacked device which receives packets from its underlying device based on MAC address filtering.</entry></row>
 147
 148           <row><entry><varname>sit</varname></entry>
 149           <entry>An IPv6 over IPv4 tunnel.</entry></row>
 150
 151           <row><entry><varname>tap</varname></entry>
 152           <entry>A persistent Level 2 tunnel between a network device and a device node.</entry></row>
 153
 154           <row><entry><varname>tun</varname></entry>
 155           <entry>A persistent Level 3 tunnel between a network device and a device node.</entry></row>
 156
 157           <row><entry><varname>veth</varname></entry>
 158           <entry>An Ethernet tunnel between a pair of network devices.</entry></row>
 159
 160           <row><entry><varname>vlan</varname></entry>
 161           <entry>A VLAN is a stacked device which receives packets from its underlying device based on VLAN tagging. See <ulink url="http://www.ieee802.org/1/pages/802.1Q.html">IEEE 802.1Q</ulink> for details.</entry></row>
 162
 163           <row><entry><varname>vti</varname></entry>
 164           <entry>An IPv4 over IPSec tunnel.</entry></row>
 165
 166           <row><entry><varname>vti6</varname></entry>
 167           <entry>An IPv6 over IPSec tunnel.</entry></row>
 168
 169           <row><entry><varname>vxlan</varname></entry>
 170           <entry>A virtual extensible LAN (vxlan), for connecting Cloud computing deployments.</entry></row>
 171
 172           <row><entry><varname>vrf</varname></entry>
 173           <entry>A Virtual Routing and Forwarding (<ulink url="https://www.kernel.org/doc/Documentation/networking/vrf.txt">VRF</ulink>) interface to create separate routing and forwarding domains.</entry></row>
 174
 175           <row><entry><varname>vcan</varname></entry>
 176           <entry>The virtual CAN driver (vcan). Similar to the network loopback devices, vcan offers a virtual local CAN interface.</entry></row>
 177
 178         </tbody>
 179       </tgroup>
 180     </table>
 181
 182   </refsect1>
 183
 184   <refsect1>
 185     <title>[Match] Section Options</title>
 186
 187     <para>A virtual network device is only created if the
 188     <literal>[Match]</literal> section matches the current
 189     environment, or if the section is empty. The following keys are
 190     accepted:</para>
 191
 192     <variablelist class='network-directives'>
 193       <varlistentry>
 194         <term><varname>Host=</varname></term>
 195         <listitem>
 196           <para>Matches against the hostname or machine ID of the
 197           host. See <literal>ConditionHost=</literal> in
 198           <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 199           for details.
 200           </para>
 201         </listitem>
 202       </varlistentry>
 203       <varlistentry>
 204         <term><varname>Virtualization=</varname></term>
 205         <listitem>
 206           <para>Checks whether the system is executed in a virtualized
 207           environment and optionally test whether it is a specific
 208           implementation. See
 209           <literal>ConditionVirtualization=</literal> in
 210           <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 211           for details.
 212           </para>
 213         </listitem>
 214       </varlistentry>
 215       <varlistentry>
 216         <term><varname>KernelCommandLine=</varname></term>
 217         <listitem>
 218           <para>Checks whether a specific kernel command line option
 219           is set (or if prefixed with the exclamation mark unset). See
 220           <literal>ConditionKernelCommandLine=</literal> in
 221           <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 222           for details.
 223           </para>
 224         </listitem>
 225       </varlistentry>
 226       <varlistentry>
 227         <term><varname>Architecture=</varname></term>
 228         <listitem>
 229           <para>Checks whether the system is running on a specific
 230           architecture. See <literal>ConditionArchitecture=</literal> in
 231           <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>
 232           for details.
 233           </para>
 234         </listitem>
 235       </varlistentry>
 236     </variablelist>
 237
 238   </refsect1>
 239
 240   <refsect1>
 241     <title>[NetDev] Section Options</title>
 242
 243       <para>The <literal>[NetDev]</literal> section accepts the
 244       following keys:</para>
 245
 246       <variablelist class='network-directives'>
 247         <varlistentry>
 248           <term><varname>Description=</varname></term>
 249           <listitem>
 250             <para>A free-form description of the netdev.</para>
 251           </listitem>
 252         </varlistentry>
 253         <varlistentry>
 254           <term><varname>Name=</varname></term>
 255           <listitem>
 256             <para>The interface name used when creating the netdev.
 257             This option is compulsory.</para>
 258           </listitem>
 259         </varlistentry>
 260         <varlistentry>
 261           <term><varname>Kind=</varname></term>
 262           <listitem>
 263             <para>The netdev kind. This option is compulsory. See the
 264             <literal>Supported netdev kinds</literal> section for the
 265             valid keys.</para>
 266           </listitem>
 267         </varlistentry>
 268         <varlistentry>
 269           <term><varname>MTUBytes=</varname></term>
 270           <listitem>
 271             <para>The maximum transmission unit in bytes to set for
 272             the device. The usual suffixes K, M, G, are supported and
 273             are understood to the base of 1024. This key is not
 274             currently supported for <literal>tun</literal> or
 275             <literal>tap</literal> devices.
 276             </para>
 277           </listitem>
 278         </varlistentry>
 279         <varlistentry>
 280           <term><varname>MACAddress=</varname></term>
 281           <listitem>
 282             <para>The MAC address to use for the device. If none is
 283             given, one is generated based on the interface name and
 284             the
 285             <citerefentry><refentrytitle>machine-id</refentrytitle><manvolnum>5</manvolnum></citerefentry>.
 286             This key is not currently supported for
 287             <literal>tun</literal> or <literal>tap</literal> devices.
 288             </para>
 289           </listitem>
 290         </varlistentry>
 291       </variablelist>
 292   </refsect1>
 293
 294     <refsect1>
 295     <title>[Bridge] Section Options</title>
 296
 297       <para>The <literal>[Bridge]</literal> section only applies for
 298       netdevs of kind <literal>bridge</literal>, and accepts the
 299       following keys:</para>
 300
 301       <variablelist class='network-directives'>
 302         <varlistentry>
 303           <term><varname>HelloTimeSec=</varname></term>
 304           <listitem>
 305             <para>HelloTimeSec specifies the number of seconds between two hello packets
 306             sent out by the root bridge and the designated bridges. Hello packets are
 307             used to communicate information about the topology throughout the entire
 308             bridged local area network.</para>
 309           </listitem>
 310         </varlistentry>
 311         <varlistentry>
 312           <term><varname>MaxAgeSec=</varname></term>
 313           <listitem>
 314             <para>MaxAgeSec specifies the number of seconds of maximum message age.
 315             If the last seen (received) hello packet is more than this number of
 316             seconds old, the bridge in question will start the takeover procedure
 317             in attempt to become the Root Bridge itself.</para>
 318           </listitem>
 319         </varlistentry>
 320         <varlistentry>
 321           <term><varname>ForwardDelaySec=</varname></term>
 322           <listitem>
 323             <para>ForwardDelaySec specifies the number of seconds spent in each
 324             of the Listening and Learning states before the Forwarding state is entered.</para>
 325           </listitem>
 326         </varlistentry>
 327         <varlistentry>
 328           <term><varname>AgeingTimeSec=</varname></term>
 329           <listitem>
 330             <para>This specifies the number of seconds a MAC Address will be kept in
 331             the forwarding database after having a packet received from this MAC Address.</para>
 332           </listitem>
 333         </varlistentry>
 334         <varlistentry>
 335           <term><varname>Priority=</varname></term>
 336           <listitem>
 337             <para>The priority of the bridge. An integer between 0 and 65535. A lower value
 338             means higher priority. The bridge having the lowest priority will be elected as root bridge.</para>
 339           </listitem>
 340         </varlistentry>
 341         <varlistentry>
 342           <term><varname>DefaultPVID=</varname></term>
 343           <listitem>
 344             <para>This specifies the default port VLAN ID of a newly attached bridge port.</para>
 345           </listitem>
 346         </varlistentry>
 347         <varlistentry>
 348           <term><varname>MulticastQuerier=</varname></term>
 349           <listitem>
 350             <para>A boolean. This setting controls the IFLA_BR_MCAST_QUERIER option in the kernel.
 351             If enabled, the kernel will send general ICMP queries from a zero source address.
 352             This feature should allow faster convergence on startup, but it causes some
 353             multicast-aware switches to misbehave and disrupt forwarding of multicast packets.
 354             When unset, the kernel's default setting applies.
 355             </para>
 356           </listitem>
 357         </varlistentry>
 358         <varlistentry>
 359           <term><varname>MulticastSnooping=</varname></term>
 360           <listitem>
 361             <para>A boolean. This setting controls the IFLA_BR_MCAST_SNOOPING option in the kernel.
 362             If enabled, IGMP snooping monitors the Internet Group Management Protocol (IGMP) traffic
 363             between hosts and multicast routers. When unset, the kernel's default setting applies.
 364             </para>
 365           </listitem>
 366         </varlistentry>
 367         <varlistentry>
 368           <term><varname>VLANFiltering=</varname></term>
 369           <listitem>
 370             <para>A boolean. This setting controls the IFLA_BR_VLAN_FILTERING option in the kernel.
 371             If enabled, the bridge will be started in VLAN-filtering mode. When unset, the kernel's
 372             default setting applies.
 373             </para>
 374           </listitem>
 375         </varlistentry>
 376           <varlistentry>
 377           <term><varname>STP=</varname></term>
 378           <listitem>
 379             <para>A boolean. This enables the bridge's Spanning Tree Protocol (STP). When unset,
 380             the kernel's default setting applies.
 381             </para>
 382           </listitem>
 383         </varlistentry>
 384       </variablelist>
 385   </refsect1>
 386
 387   <refsect1>
 388     <title>[VLAN] Section Options</title>
 389
 390       <para>The <literal>[VLAN]</literal> section only applies for
 391       netdevs of kind <literal>vlan</literal>, and accepts the
 392       following key:</para>
 393
 394       <variablelist class='network-directives'>
 395         <varlistentry>
 396           <term><varname>Id=</varname></term>
 397           <listitem>
 398             <para>The VLAN ID to use. An integer in the range 0–4094.
 399             This option is compulsory.</para>
 400           </listitem>
 401         </varlistentry>
 402       </variablelist>
 403
 404   </refsect1>
 405
 406   <refsect1>
 407     <title>[MACVLAN] Section Options</title>
 408
 409     <para>The <literal>[MACVLAN]</literal> section only applies for
 410     netdevs of kind <literal>macvlan</literal>, and accepts the
 411     following key:</para>
 412
 413     <variablelist class='network-directives'>
 414       <varlistentry>
 415         <term><varname>Mode=</varname></term>
 416         <listitem>
 417           <para>The MACVLAN mode to use. The supported options are
 418           <literal>private</literal>,
 419           <literal>vepa</literal>,
 420           <literal>bridge</literal>, and
 421           <literal>passthru</literal>.
 422           </para>
 423         </listitem>
 424       </varlistentry>
 425     </variablelist>
 426
 427   </refsect1>
 428
 429     <refsect1>
 430     <title>[MACVTAP] Section Options</title>
 431
 432     <para>The <literal>[MACVTAP]</literal> section applies for
 433     netdevs of kind <literal>macvtap</literal> and accepts the
 434     same key as <literal>[MACVLAN]</literal>.</para>
 435
 436     </refsect1>
 437
 438   <refsect1>
 439     <title>[IPVLAN] Section Options</title>
 440
 441     <para>The <literal>[IPVLAN]</literal> section only applies for
 442     netdevs of kind <literal>ipvlan</literal>, and accepts the
 443     following key:</para>
 444
 445     <variablelist class='network-directives'>
 446       <varlistentry>
 447         <term><varname>Mode=</varname></term>
 448           <listitem>
 449             <para>The IPVLAN mode to use. The supported options are
 450             <literal>L2</literal> and <literal>L3</literal>.
 451             </para>
 452           </listitem>
 453       </varlistentry>
 454     </variablelist>
 455
 456   </refsect1>
 457
 458   <refsect1>
 459     <title>[VXLAN] Section Options</title>
 460     <para>The <literal>[VXLAN]</literal> section only applies for
 461     netdevs of kind <literal>vxlan</literal>, and accepts the
 462     following keys:</para>
 463
 464     <variablelist class='network-directives'>
 465       <varlistentry>
 466         <term><varname>Id=</varname></term>
 467         <listitem>
 468           <para>The VXLAN ID to use.</para>
 469         </listitem>
 470       </varlistentry>
 471       <varlistentry>
 472         <term><varname>Remote=</varname></term>
 473         <listitem>
 474           <para>Configures destination multicast group IP address.</para>
 475         </listitem>
 476       </varlistentry>
 477       <varlistentry>
 478         <term><varname>Local=</varname></term>
 479         <listitem>
 480           <para>Configures local IP address.</para>
 481         </listitem>
 482       </varlistentry>
 483         <varlistentry>
 484         <term><varname>TOS=</varname></term>
 485         <listitem>
 486           <para>The Type Of Service byte value for a vxlan interface.</para>
 487         </listitem>
 488       </varlistentry>
 489       <varlistentry>
 490         <term><varname>TTL=</varname></term>
 491         <listitem>
 492           <para>A fixed Time To Live N on Virtual eXtensible Local
 493           Area Network packets. N is a number in the range 1–255. 0
 494           is a special value meaning that packets inherit the TTL
 495           value.</para>
 496         </listitem>
 497       </varlistentry>
 498       <varlistentry>
 499         <term><varname>MacLearning=</varname></term>
 500         <listitem>
 501           <para>A boolean. When true, enables dynamic MAC learning
 502           to discover remote MAC addresses.</para>
 503         </listitem>
 504       </varlistentry>
 505       <varlistentry>
 506         <term><varname>FDBAgeingSec=</varname></term>
 507         <listitem>
 508           <para>The lifetime of Forwarding Database entry learnt by
 509           the kernel, in seconds.</para>
 510         </listitem>
 511       </varlistentry>
 512       <varlistentry>
 513         <term><varname>MaximumFDBEntries=</varname></term>
 514         <listitem>
 515           <para>Configures maximum number of FDB entries.</para>
 516         </listitem>
 517       </varlistentry>
 518       <varlistentry>
 519         <term><varname>ReduceARPProxy=</varname></term>
 520         <listitem>
 521           <para>A boolean. When true, bridge-connected VXLAN tunnel
 522           endpoint answers ARP requests from the local bridge on behalf
 523           of remote Distributed Overlay Virtual Ethernet
 524           <ulink url="https://en.wikipedia.org/wiki/Distributed_Overlay_Virtual_Ethernet">
 525           (DVOE)</ulink> clients. Defaults to false.</para>
 526         </listitem>
 527       </varlistentry>
 528       <varlistentry>
 529         <term><varname>L2MissNotification=</varname></term>
 530         <listitem>
 531           <para>A boolean. When true, enables netlink LLADDR miss
 532           notifications.</para>
 533         </listitem>
 534       </varlistentry>
 535       <varlistentry>
 536         <term><varname>L3MissNotification=</varname></term>
 537         <listitem>
 538           <para>A boolean. When true, enables netlink IP address miss
 539           notifications.</para>
 540         </listitem>
 541       </varlistentry>
 542       <varlistentry>
 543         <term><varname>RouteShortCircuit=</varname></term>
 544         <listitem>
 545           <para>A boolean. When true, route short circuiting is turned
 546           on.</para>
 547         </listitem>
 548       </varlistentry>
 549       <varlistentry>
 550         <term><varname>UDPChecksum=</varname></term>
 551         <listitem>
 552           <para>A boolean. When true, transmitting UDP checksums when doing VXLAN/IPv4 is turned on.</para>
 553         </listitem>
 554       </varlistentry>
 555       <varlistentry>
 556         <term><varname>UDP6ZeroChecksumTx=</varname></term>
 557         <listitem>
 558           <para>A boolean. When true, sending zero checksums in VXLAN/IPv6 is turned on.</para>
 559         </listitem>
 560       </varlistentry>
 561       <varlistentry>
 562         <term><varname>UDP6ZeroChecksumRx=</varname></term>
 563         <listitem>
 564           <para>A boolean. When true, receiving zero checksums in VXLAN/IPv6 is turned on.</para>
 565         </listitem>
 566       </varlistentry>
 567       <varlistentry>
 568         <term><varname>RemoteChecksumTx=</varname></term>
 569         <listitem>
 570           <para>A boolean. When true, remote transmit checksum offload of VXLAN is turned on.</para>
 571         </listitem>
 572       </varlistentry>
 573       <varlistentry>
 574         <term><varname>RemoteChecksumRx=</varname></term>
 575         <listitem>
 576           <para>A boolean. When true, remote receive checksum offload in VXLAN is turned on.</para>
 577         </listitem>
 578       </varlistentry>
 579     <varlistentry>
 580       <term><varname>GroupPolicyExtension=</varname></term>
 581       <listitem>
 582         <para>A boolean. When true, it enables Group Policy VXLAN extension security label mechanism
 583         across network peers based on VXLAN. For details about the Group Policy VXLAN, see the
 584         <ulink url="https://tools.ietf.org/html/draft-smith-vxlan-group-policy">
 585         VXLAN Group Policy </ulink> document. Defaults to false.</para>
 586       </listitem>
 587     </varlistentry>
 588     <varlistentry>
 589       <term><varname>DestinationPort=</varname></term>
 590       <listitem>
 591         <para>Configures the default destination UDP port on a per-device basis.
 592         If destination port is not specified then Linux kernel default will be used.
 593         Set destination port 4789 to get the IANA assigned value,
 594         and destination port 0 to get default values.</para>
 595       </listitem>
 596     </varlistentry>
 597     <varlistentry>
 598       <term><varname>PortRange=</varname></term>
 599         <listitem>
 600           <para>Configures VXLAN port range. VXLAN bases source
 601           UDP port based on flow to help the receiver to be able
 602           to load balance based on outer header flow. It
 603           restricts the port range to the normal UDP local
 604           ports, and allows overriding via configuration.</para>
 605         </listitem>
 606       </varlistentry>
 607     </variablelist>
 608   </refsect1>
 609   <refsect1>
 610     <title>[Tunnel] Section Options</title>
 611
 612     <para>The <literal>[Tunnel]</literal> section only applies for
 613     netdevs of kind
 614     <literal>ipip</literal>,
 615     <literal>sit</literal>,
 616     <literal>gre</literal>,
 617     <literal>gretap</literal>,
 618     <literal>ip6gre</literal>,
 619     <literal>ip6gretap</literal>,
 620     <literal>vti</literal>,
 621     <literal>vti6</literal>, and
 622     <literal>ip6tnl</literal> and accepts
 623     the following keys:</para>
 624
 625     <variablelist class='network-directives'>
 626       <varlistentry>
 627         <term><varname>Local=</varname></term>
 628         <listitem>
 629           <para>A static local address for tunneled packets. It must
 630           be an address on another interface of this host.</para>
 631         </listitem>
 632       </varlistentry>
 633       <varlistentry>
 634         <term><varname>Remote=</varname></term>
 635         <listitem>
 636           <para>The remote endpoint of the tunnel.</para>
 637         </listitem>
 638       </varlistentry>
 639       <varlistentry>
 640         <term><varname>TOS=</varname></term>
 641         <listitem>
 642           <para>The Type Of Service byte value for a tunnel interface.
 643           For details about the TOS, see the
 644           <ulink url="http://tools.ietf.org/html/rfc1349"> Type of
 645           Service in the Internet Protocol Suite </ulink> document.
 646           </para>
 647         </listitem>
 648       </varlistentry>
 649       <varlistentry>
 650         <term><varname>TTL=</varname></term>
 651         <listitem>
 652           <para>A fixed Time To Live N on tunneled packets. N is a
 653           number in the range 1–255. 0 is a special value meaning that
 654           packets inherit the TTL value. The default value for IPv4
 655           tunnels is: inherit. The default value for IPv6 tunnels is
 656           64.</para>
 657         </listitem>
 658       </varlistentry>
 659       <varlistentry>
 660         <term><varname>DiscoverPathMTU=</varname></term>
 661         <listitem>
 662           <para>A boolean. When true, enables Path MTU Discovery on
 663           the tunnel.</para>
 664         </listitem>
 665       </varlistentry>
 666       <varlistentry>
 667         <term><varname>IPv6FlowLabel=</varname></term>
 668         <listitem>
 669           <para>Configures the 20-bit flow label (see <ulink url="https://tools.ietf.org/html/rfc6437">
 670           RFC 6437</ulink>) field in the IPv6 header (see <ulink url="https://tools.ietf.org/html/rfc2460">
 671           RFC 2460</ulink>), which is used by a node to label packets of a flow.
 672           It is only used for IPv6 tunnels.
 673           A flow label of zero is used to indicate packets that have
 674           not been labeled.
 675           It can be configured to a value in the range 0–0xFFFFF, or be
 676           set to <literal>inherit</literal>, in which case the original flowlabel is used.</para>
 677         </listitem>
 678       </varlistentry>
 679       <varlistentry>
 680         <term><varname>CopyDSCP=</varname></term>
 681         <listitem>
 682           <para>A boolean. When true, the Differentiated Service Code
 683           Point (DSCP) field will be copied to the inner header from
 684           outer header during the decapsulation of an IPv6 tunnel
 685           packet. DSCP is a field in an IP packet that enables different
 686           levels of service to be assigned to network traffic.
 687           Defaults to <literal>no</literal>.
 688           </para>
 689         </listitem>
 690       </varlistentry>
 691       <varlistentry>
 692         <term><varname>EncapsulationLimit=</varname></term>
 693         <listitem>
 694           <para>The Tunnel Encapsulation Limit option specifies how many additional
 695           levels of encapsulation are permitted to be prepended to the packet.
 696           For example, a Tunnel Encapsulation Limit option containing a limit
 697           value of zero means that a packet carrying that option may not enter
 698           another tunnel before exiting the current tunnel.
 699           (see <ulink url="https://tools.ietf.org/html/rfc2473#section-4.1.1"> RFC 2473</ulink>).
 700           The valid range is 0–255 and <literal>none</literal>. Defaults to 4.
 701         </para>
 702         </listitem>
 703       </varlistentry>
 704       <varlistentry>
 705         <term><varname>Key=</varname></term>
 706         <listitem>
 707           <para>The <varname>Key=</varname> parameter specifies the same key to use in
 708           both directions (<varname>InputKey=</varname> and <varname>OutputKey=</varname>).
 709           The <varname>Key=</varname> is either a number or an IPv4 address-like dotted quad.
 710           It is used as mark-configured SAD/SPD entry as part of the lookup key (both in data
 711           and control path) in ip xfrm (framework used to implement IPsec protocol).
 712           See <ulink url="http://man7.org/linux/man-pages/man8/ip-xfrm.8.html">
 713           ip-xfrm — transform configuration</ulink> for details. It is only used for VTI/VTI6
 714           tunnels.</para>
 715         </listitem>
 716       </varlistentry>
 717       <varlistentry>
 718         <term><varname>InputKey=</varname></term>
 719         <listitem>
 720           <para>The <varname>InputKey=</varname> parameter specifies the key to use for input.
 721           The format is same as <varname>Key=</varname>. It is only used for VTI/VTI6 tunnels.</para>
 722         </listitem>
 723       </varlistentry>
 724       <varlistentry>
 725         <term><varname>OutputKey=</varname></term>
 726         <listitem>
 727           <para>The <varname>OutputKey=</varname> parameter specifies the key to use for output.
 728           The format is same as <varname>Key=</varname>. It is only used for VTI/VTI6 tunnels.</para>
 729         </listitem>
 730       </varlistentry>
 731       <varlistentry>
 732         <term><varname>Mode=</varname></term>
 733         <listitem>
 734           <para>An <literal>ip6tnl</literal> tunnel can be in one of three
 735           modes
 736           <literal>ip6ip6</literal> for IPv6 over IPv6,
 737           <literal>ipip6</literal> for IPv4 over IPv6 or
 738           <literal>any</literal> for either.
 739           </para>
 740         </listitem>
 741       </varlistentry>
 742     </variablelist>
 743   </refsect1>
 744   <refsect1>
 745     <title>[Peer] Section Options</title>
 746
 747       <para>The <literal>[Peer]</literal> section only applies for
 748       netdevs of kind <literal>veth</literal> and accepts the
 749       following keys:</para>
 750
 751       <variablelist class='network-directives'>
 752         <varlistentry>
 753           <term><varname>Name=</varname></term>
 754           <listitem>
 755             <para>The interface name used when creating the netdev.
 756             This option is compulsory.</para>
 757           </listitem>
 758         </varlistentry>
 759         <varlistentry>
 760           <term><varname>MACAddress=</varname></term>
 761           <listitem>
 762             <para>The peer MACAddress, if not set, it is generated in
 763             the same way as the MAC address of the main
 764             interface.</para>
 765           </listitem>
 766         </varlistentry>
 767       </variablelist>
 768   </refsect1>
 769   <refsect1>
 770     <title>[Tun] Section Options</title>
 771
 772     <para>The <literal>[Tun]</literal> section only applies for
 773     netdevs of kind <literal>tun</literal>, and accepts the following
 774     keys:</para>
 775
 776     <variablelist class='network-directives'>
 777       <varlistentry>
 778         <term><varname>OneQueue=</varname></term>
 779         <listitem><para>Takes a boolean argument. Configures whether
 780         all packets are queued at the device (enabled), or a fixed
 781         number of packets are queued at the device and the rest at the
 782         <literal>qdisc</literal>. Defaults to
 783         <literal>no</literal>.</para>
 784         </listitem>
 785       </varlistentry>
 786       <varlistentry>
 787         <term><varname>MultiQueue=</varname></term>
 788         <listitem><para>Takes a boolean argument. Configures whether
 789         to use multiple file descriptors (queues) to parallelize
 790         packets sending and receiving. Defaults to
 791         <literal>no</literal>.</para>
 792         </listitem>
 793       </varlistentry>
 794       <varlistentry>
 795         <term><varname>PacketInfo=</varname></term>
 796         <listitem><para>Takes a boolean argument. Configures whether
 797         packets should be prepended with four extra bytes (two flag
 798         bytes and two protocol bytes). If disabled, it indicates that
 799         the packets will be pure IP packets. Defaults to
 800         <literal>no</literal>.</para>
 801         </listitem>
 802       </varlistentry>
 803       <varlistentry>
 804         <term><varname>VNetHeader=</varname></term>
 805         <listitem><para>Takes a boolean argument. Configures
 806         IFF_VNET_HDR flag for a tap device. It allows sending
 807         and receiving larger Generic Segmentation Offload (GSO)
 808         packets. This may increase throughput significantly.
 809         Defaults to
 810         <literal>no</literal>.</para>
 811         </listitem>
 812       </varlistentry>
 813       <varlistentry>
 814         <term><varname>User=</varname></term>
 815         <listitem><para>User to grant access to the
 816         <filename>/dev/net/tun</filename> device.</para>
 817         </listitem>
 818       </varlistentry>
 819       <varlistentry>
 820         <term><varname>Group=</varname></term>
 821         <listitem><para>Group to grant access to the
 822         <filename>/dev/net/tun</filename> device.</para>
 823         </listitem>
 824       </varlistentry>
 825
 826     </variablelist>
 827
 828   </refsect1>
 829
 830   <refsect1>
 831     <title>[Tap] Section Options</title>
 832
 833     <para>The <literal>[Tap]</literal> section only applies for
 834     netdevs of kind <literal>tap</literal>, and accepts the same keys
 835     as the <literal>[Tun]</literal> section.</para>
 836   </refsect1>
 837
 838   <refsect1>
 839     <title>[Bond] Section Options</title>
 840
 841     <para>The <literal>[Bond]</literal> section accepts the following
 842     key:</para>
 843
 844     <variablelist class='network-directives'>
 845       <varlistentry>
 846         <term><varname>Mode=</varname></term>
 847         <listitem>
 848           <para>Specifies one of the bonding policies. The default is
 849           <literal>balance-rr</literal> (round robin). Possible values are
 850           <literal>balance-rr</literal>,
 851           <literal>active-backup</literal>,
 852           <literal>balance-xor</literal>,
 853           <literal>broadcast</literal>,
 854           <literal>802.3ad</literal>,
 855           <literal>balance-tlb</literal>, and
 856           <literal>balance-alb</literal>.
 857           </para>
 858         </listitem>
 859       </varlistentry>
 860
 861       <varlistentry>
 862         <term><varname>TransmitHashPolicy=</varname></term>
 863         <listitem>
 864           <para>Selects the transmit hash policy to use for slave
 865           selection in balance-xor, 802.3ad, and tlb modes. Possible
 866           values are
 867           <literal>layer2</literal>,
 868           <literal>layer3+4</literal>,
 869           <literal>layer2+3</literal>,
 870           <literal>encap2+3</literal>, and
 871           <literal>encap3+4</literal>.
 872           </para>
 873         </listitem>
 874       </varlistentry>
 875
 876       <varlistentry>
 877         <term><varname>LACPTransmitRate=</varname></term>
 878         <listitem>
 879           <para>Specifies the rate with which link partner transmits
 880           Link Aggregation Control Protocol Data Unit packets in
 881           802.3ad mode. Possible values are <literal>slow</literal>,
 882           which requests partner to transmit LACPDUs every 30 seconds,
 883           and <literal>fast</literal>, which requests partner to
 884           transmit LACPDUs every second. The default value is
 885           <literal>slow</literal>.</para>
 886         </listitem>
 887       </varlistentry>
 888
 889       <varlistentry>
 890         <term><varname>MIIMonitorSec=</varname></term>
 891         <listitem>
 892           <para>Specifies the frequency that Media Independent
 893           Interface link monitoring will occur. A value of zero
 894           disables MII link monitoring. This value is rounded down to
 895           the nearest millisecond. The default value is 0.</para>
 896         </listitem>
 897       </varlistentry>
 898
 899       <varlistentry>
 900         <term><varname>UpDelaySec=</varname></term>
 901         <listitem>
 902           <para>Specifies the delay before a link is enabled after a
 903           link up status has been detected. This value is rounded down
 904           to a multiple of MIIMonitorSec. The default value is
 905           0.</para>
 906         </listitem>
 907       </varlistentry>
 908
 909       <varlistentry>
 910         <term><varname>DownDelaySec=</varname></term>
 911         <listitem>
 912           <para>Specifies the delay before a link is disabled after a
 913           link down status has been detected. This value is rounded
 914           down to a multiple of MIIMonitorSec. The default value is
 915           0.</para>
 916         </listitem>
 917       </varlistentry>
 918
 919       <varlistentry>
 920         <term><varname>LearnPacketIntervalSec=</varname></term>
 921         <listitem>
 922           <para>Specifies the number of seconds between instances where the bonding
 923           driver sends learning packets to each slave peer switch.
 924           The valid range is 1–0x7fffffff; the default value is 1. This option
 925           has an effect only for the balance-tlb and balance-alb modes.</para>
 926         </listitem>
 927       </varlistentry>
 928
 929       <varlistentry>
 930         <term><varname>AdSelect=</varname></term>
 931         <listitem>
 932           <para>Specifies the 802.3ad aggregation selection logic to use. Possible values are
 933           <literal>stable</literal>,
 934           <literal>bandwidth</literal> and
 935           <literal>count</literal>.
 936           </para>
 937         </listitem>
 938       </varlistentry>
 939
 940       <varlistentry>
 941         <term><varname>FailOverMACPolicy=</varname></term>
 942         <listitem>
 943           <para>Specifies whether the active-backup mode should set all slaves to
 944           the same MAC address at the time of enslavement or, when enabled, to perform special handling of the
 945           bond's MAC address in accordance with the selected policy. The default policy is none.
 946           Possible values are
 947           <literal>none</literal>,
 948           <literal>active</literal> and
 949           <literal>follow</literal>.
 950           </para>
 951         </listitem>
 952       </varlistentry>
 953
 954       <varlistentry>
 955         <term><varname>ARPValidate=</varname></term>
 956         <listitem>
 957           <para>Specifies whether or not ARP probes and replies should be
 958           validated in any mode that supports ARP monitoring, or whether
 959           non-ARP traffic should be filtered (disregarded) for link
 960           monitoring purposes. Possible values are
 961           <literal>none</literal>,
 962           <literal>active</literal>,
 963           <literal>backup</literal> and
 964           <literal>all</literal>.
 965           </para>
 966         </listitem>
 967       </varlistentry>
 968
 969       <varlistentry>
 970         <term><varname>ARPIntervalSec=</varname></term>
 971         <listitem>
 972           <para>Specifies the ARP link monitoring frequency in milliseconds.
 973           A value of 0 disables ARP monitoring. The default value is 0.
 974           </para>
 975         </listitem>
 976       </varlistentry>
 977
 978       <varlistentry>
 979         <term><varname>ARPIPTargets=</varname></term>
 980         <listitem>
 981           <para>Specifies the IP addresses to use as ARP monitoring peers when
 982           ARPIntervalSec is greater than 0. These are the targets of the ARP request
 983           sent to determine the health of the link to the targets.
 984           Specify these values in IPv4 dotted decimal format. At least one IP
 985           address must be given for ARP monitoring to function. The
 986           maximum number of targets that can be specified is 16. The
 987           default value is no IP addresses.
 988           </para>
 989         </listitem>
 990       </varlistentry>
 991
 992       <varlistentry>
 993         <term><varname>ARPAllTargets=</varname></term>
 994         <listitem>
 995           <para>Specifies the quantity of ARPIPTargets that must be reachable
 996           in order for the ARP monitor to consider a slave as being up.
 997           This option affects only active-backup mode for slaves with
 998           ARPValidate enabled. Possible values are
 999           <literal>any</literal> and
1000           <literal>all</literal>.
1001           </para>
1002         </listitem>
1003       </varlistentry>
1004
1005       <varlistentry>
1006         <term><varname>PrimaryReselectPolicy=</varname></term>
1007         <listitem>
1008           <para>Specifies the reselection policy for the primary slave.  This
1009           affects how the primary slave is chosen to become the active slave
1010           when failure of the active slave or recovery of the primary slave
1011           occurs. This option is designed to prevent flip-flopping between
1012           the primary slave and other slaves.  Possible values are
1013           <literal>always</literal>,
1014           <literal>better</literal> and
1015           <literal>failure</literal>.
1016           </para>
1017         </listitem>
1018       </varlistentry>
1019
1020       <varlistentry>
1021         <term><varname>ResendIGMP=</varname></term>
1022         <listitem>
1023           <para>Specifies the number of IGMP membership reports to be issued after
1024           a failover event. One membership report is issued immediately after
1025           the failover, subsequent packets are sent in each 200ms interval.
1026           The valid range is 0–255. Defaults to 1. A value of 0
1027           prevents the IGMP membership report from being issued in response
1028           to the failover event.
1029           </para>
1030         </listitem>
1031       </varlistentry>
1032
1033       <varlistentry>
1034         <term><varname>PacketsPerSlave=</varname></term>
1035         <listitem>
1036           <para>Specify the number of packets to transmit through a slave before
1037             moving to the next one. When set to 0, then a slave is chosen at
1038             random. The valid range is 0–65535. Defaults to 1. This option
1039             only has effect when in balance-rr mode.
1040           </para>
1041         </listitem>
1042       </varlistentry>
1043
1044       <varlistentry>
1045         <term><varname>GratuitousARP=</varname></term>
1046         <listitem>
1047           <para>Specify the number of peer notifications (gratuitous ARPs and
1048             unsolicited IPv6 Neighbor Advertisements) to be issued after a
1049             failover event.  As soon as the link is up on the new slave,
1050             a peer notification is sent on the  bonding device and each
1051             VLAN sub-device.  This is repeated at each link monitor interval
1052             (ARPIntervalSec or MIIMonitorSec, whichever is active) if the number is
1053             greater than 1. The valid range is 0–255. The default value is 1.
1054             These options affect only the active-backup mode.
1055           </para>
1056         </listitem>
1057       </varlistentry>
1058
1059       <varlistentry>
1060         <term><varname>AllSlavesActive=</varname></term>
1061         <listitem>
1062           <para>A boolean. Specifies that duplicate frames (received on inactive ports)
1063           should be dropped when false, or delivered when true. Normally, bonding will drop
1064           duplicate frames (received on inactive ports), which is desirable for
1065           most users. But there are some times it is nice to allow duplicate
1066           frames to be delivered. The default value is false (drop duplicate frames
1067           received on inactive ports).
1068           </para>
1069         </listitem>
1070       </varlistentry>
1071
1072       <varlistentry>
1073         <term><varname>MinLinks=</varname></term>
1074         <listitem>
1075           <para>Specifies the minimum number of links that must be active before
1076           asserting carrier. The default value is 0.
1077           </para>
1078         </listitem>
1079       </varlistentry>
1080
1081       <varlistentry>
1082         <term><varname>ActiveSlave=</varname></term>
1083         <listitem>
1084           <para>A boolean. Specifies the new active slave. The <literal>ActiveSlave=</literal>
1085           option is only valid for following modes:
1086           <literal>active-backup</literal>,
1087           <literal>balance-alb</literal> and
1088           <literal>balance-tlb</literal>. Defaults to false.
1089           </para>
1090         </listitem>
1091       </varlistentry>
1092
1093       <varlistentry>
1094         <term><varname>PrimarySlave=</varname></term>
1095         <listitem>
1096           <para>A boolean. Specifies which slave is the primary device. The specified
1097           device will always be the active slave while it is available. Only when the
1098           primary is off-line will alternate devices be used.  This is useful when
1099           one slave is preferred over another, e.g. when one slave has higher throughput
1100           than another. The <literal>PrimarySlave=</literal> option is only valid for
1101           following modes:
1102           <literal>active-backup</literal>,
1103           <literal>balance-alb</literal> and
1104           <literal>balance-tlb</literal>. Defaults to false.
1105           </para>
1106         </listitem>
1107       </varlistentry>
1108     </variablelist>
1109
1110     <para>For more detail information see
1111     <ulink url="https://www.kernel.org/doc/Documentation/networking/bonding.txt">
1112     Linux Ethernet Bonding Driver HOWTO</ulink></para>
1113
1114   </refsect1>
1115
1116   <refsect1>
1117     <title>Example</title>
1118     <example>
1119       <title>/etc/systemd/network/25-bridge.netdev</title>
1120
1121       <programlisting>[NetDev]
1122 Name=bridge0
1123 Kind=bridge</programlisting>
1124     </example>
1125
1126     <example>
1127       <title>/etc/systemd/network/25-vlan1.netdev</title>
1128
1129       <programlisting>[Match]
1130 Virtualization=no
1131
1132 [NetDev]
1133 Name=vlan1
1134 Kind=vlan
1135
1136 [VLAN]
1137 Id=1</programlisting>
1138     </example>
1139     <example>
1140       <title>/etc/systemd/network/25-ipip.netdev</title>
1141       <programlisting>[NetDev]
1142 Name=ipip-tun
1143 Kind=ipip
1144 MTUBytes=1480
1145
1146 [Tunnel]
1147 Local=192.168.223.238
1148 Remote=192.169.224.239
1149 TTL=64</programlisting>
1150     </example>
1151     <example>
1152       <title>/etc/systemd/network/25-tap.netdev</title>
1153       <programlisting>[NetDev]
1154 Name=tap-test
1155 Kind=tap
1156
1157 [Tap]
1158 MultiQueue=true
1159 PacketInfo=true</programlisting> </example>
1160
1161     <example>
1162       <title>/etc/systemd/network/25-sit.netdev</title>
1163       <programlisting>[NetDev]
1164 Name=sit-tun
1165 Kind=sit
1166 MTUBytes=1480
1167
1168 [Tunnel]
1169 Local=10.65.223.238
1170 Remote=10.65.223.239</programlisting>
1171     </example>
1172
1173     <example>
1174       <title>/etc/systemd/network/25-gre.netdev</title>
1175       <programlisting>[NetDev]
1176 Name=gre-tun
1177 Kind=gre
1178 MTUBytes=1480
1179
1180 [Tunnel]
1181 Local=10.65.223.238
1182 Remote=10.65.223.239</programlisting>
1183     </example>
1184
1185     <example>
1186       <title>/etc/systemd/network/25-vti.netdev</title>
1187
1188       <programlisting>[NetDev]
1189 Name=vti-tun
1190 Kind=vti
1191 MTUBytes=1480
1192
1193 [Tunnel]
1194 Local=10.65.223.238
1195 Remote=10.65.223.239</programlisting>
1196     </example>
1197
1198     <example>
1199       <title>/etc/systemd/network/25-veth.netdev</title>
1200       <programlisting>[NetDev]
1201 Name=veth-test
1202 Kind=veth
1203
1204 [Peer]
1205 Name=veth-peer</programlisting>
1206     </example>
1207
1208     <example>
1209       <title>/etc/systemd/network/25-bond.netdev</title>
1210       <programlisting>[NetDev]
1211 Name=bond1
1212 Kind=bond
1213
1214 [Bond]
1215 Mode=802.3ad
1216 TransmitHashPolicy=layer3+4
1217 MIIMonitorSec=1s
1218 LACPTransmitRate=fast
1219 </programlisting>
1220     </example>
1221
1222     <example>
1223       <title>/etc/systemd/network/25-dummy.netdev</title>
1224       <programlisting>[NetDev]
1225 Name=dummy-test
1226 Kind=dummy
1227 MACAddress=12:34:56:78:9a:bc</programlisting>
1228     </example>
1229     <example>
1230       <title>/etc/systemd/network/25-vrf.netdev</title>
1231       <para>Create a VRF interface with table 42.</para>
1232       <programlisting>[NetDev]
1233 Name=vrf-test
1234 Kind=vrf
1235
1236 [VRF]
1237 TableId=42</programlisting>
1238     </example>
1239
1240     <example>
1241       <title>/etc/systemd/network/25-macvtap.netdev</title>
1242       <para>Create a MacVTap device.</para>
1243       <programlisting>[NetDev]
1244 Name=macvtap-test
1245 Kind=macvtap
1246       </programlisting>
1247     </example>
1248   </refsect1>
1249   <refsect1>
1250     <title>See Also</title>
1251     <para>
1252       <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
1253       <citerefentry><refentrytitle>systemd-networkd</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
1254       <citerefentry><refentrytitle>systemd.link</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
1255       <citerefentry><refentrytitle>systemd.network</refentrytitle><manvolnum>5</manvolnum></citerefentry>
1256     </para>
1257   </refsect1>
1258
1259 </refentry>